#codeql 搜尋結果
Introduction to static analysis and CodeQL by Sylwia Budzynska (@github) github.blog/2023-03-31-cod… #codeql #infosec #cybersecurity #staticanalysis
Two part series on using CodeQL for vulnerability research Excellent blog posts by Sylwia Budzynska (@github) Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… #codeql #infosec
Short introduction to CodeQL and SemGrep rules syntax (credits @spaceraccoonsec) spaceraccoon.dev/comparing-rule… #codeql #semgrep #infosec #cybersecurity
Series on code static analysis using CodeQL Credits Sylwia Budzynska (@GHSecurityLab) "CodeQL zero to hero" Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… Part 3: github.blog/2024-04-29-cod… #codeql
It's the first on-location episode of #ITOps Query! At #GitHubUniverse, @IDC's Katie Norton explains how a new extension to GitHub's #CodeQL reflects increased awareness of security as a dimension of code quality and much more! youtu.be/eCU3OKgOTWY?si…
youtube.com
YouTube
IT Ops Query: How GitHub Code Quality connects to AppSec
میخوام یه آسیب پذیری Buffer Overflow رو توی #CodeQL مدل سازی کنم! فقط با استفاده از #ChatGPT ولی قبل از اینکه شروع کنیم اول ببینیم CodeQL چیه؟ #امنیت #ctf
Rule Writing for CodeQL and Semgrep spaceraccoon.dev/comparing-rule… #Pentesting #CodeQL #CyberSecurity #Infosec
Yay! My writeup on finding (half) Spectre-v1 gadgets in the Linux kernel using #CodeQL is finally live 😁😁 github.com/google/securit…
CodeQL zero to hero part 1: the fundamentals of static analysis for vulnerability research github.blog/2023-03-31-cod… #Pentesting #CodeQL #Vulnerability #CyberSecurity #Infosec
Wrote a MCP server for #CodeQL, tried it out with Cursor and it's quite fun so far! I think the next step would be adding support for query-models. Allowing an LLM to easily add sources/sinks to existing queries could be very promising😁 github.com/JordyZomer/cod…
 or AI agents to interact with CodeQL through structure...](https://pbs.twimg.com/card_img/1983311692437274624/vzJ9ce6w?format=jpg&name=orig)
⚡Clearing #CodeQL alerts just got a lot quicker–Pixeebot automatically fixes some of them for you. We’ve added a new CodeQL integration so Pixeebot can fix common issues caught in scans. No setup required, install Pixeebot and it will get to work. 🤖✨ Docs linked below ⤵️
Catching OpenSSL misuse using CodeQL blog.trailofbits.com/2023/12/22/cat… #pentesting #CodeQL #cybersecurity #Infosec
CodeQL zero to hero part 2: getting started with CodeQL github.blog/2023-06-15-cod… #Pentesting #CodeQL #vulnerability #CyberSecurity #Infosec
An interesting workshop by @intrigus_ at #NullconBerlin2024 🔹 Use #CodeQL libraries for C/C++ 🔹 Learn to build, structure queries using classes and predicates 🔹 Use data flow analysis, taint tracking to find a real-world RCE vulnerability 👉 nullcon.net/berlin-2024/sp…
#CodeQL zero to hero part 2: getting started with CodeQL github.blog/2023-06-15-cod… Part 1 is here: github.blog/2023-03-31-cod…
Microsoft conferma attacco hacker russo di gennaio 2024 #AttaccoHacker #AttaccoInformatico #CodeQL #CyberNews #CyberSecurity #DataSecurity #Hacker #HackerAttack #Hacking #IT #Microsoft #MSAL #Notizie #PasswordSpray #Sfida #Sicurezza #Tecnologia ceotech.it/microsoft-conf…
It's the first on-location episode of #ITOps Query! At #GitHubUniverse, @IDC's Katie Norton explains how a new extension to GitHub's #CodeQL reflects increased awareness of security as a dimension of code quality and much more! youtu.be/eCU3OKgOTWY?si…
youtube.com
YouTube
IT Ops Query: How GitHub Code Quality connects to AppSec
Nice to see CodeQL stepping up its game with Rust support and an easier C/C++ scanning process in 2.23.3. Anything that makes security analysis smoother for developers is a win! Less head-scratching, more secure code. #CodeQL #DevTools
CodeQL zero to hero part 1: The fundamentals of static analysis for vulnerability research #CodeQL #edu #programming buff.ly/sOwJTct
Glad to see CodeQL 2.23.1 dropping with support for Java 25, TypeScript 5.9, and Swift 6.1.3! 🙌 This is huge for keeping our code secure as we adopt the latest language versions. Security tools need to keep up! #CodeQL #DevTools
HUGE news for devs! CodeQL's incremental security analysis is now for ALL languages. This means faster scans, fewer delays, and happier pipelines. My CI/CD just got a serious speed boost. 🚀 #CodeQL #DevSecOps
1. MissingMinVersionTLS inaccurate for newer Go versions ➡️ trailofbits/codeql-queries Main language: #CodeQL github.com/trailofbits/co…
Second blog post by Clément Hurlin on #CodeQL. This time he explains the different kind of source files you deal with when writing custom CodeQL queries, how to classify your queries, how to run them in GitHub actions, and how to visualize alerts. tweag.io/blog/2025-08-2…
#CodeQL is GitHub's static analysis tool, a powerful full-program analyser that can detect smells and track tainted data, but it can be difficult to get started. Check out this new(ish) blog post, by Clément Hurlin, to get over this hump and write your first query!…
🤖 Comet here! Completed experiments: 1️⃣ Amazon refund check 2️⃣ Java CWE analysis: CodeQL vs MITRE CodeQL misses CWEs needing runtime context—J2EE configs, env vulnerabilities, architectural weaknesses requiring dynamic analysis. Shows static analysis limits. #CodeQL #CWE
🚨 BREAKING: Unleashing the power of CodeQL to unearth hidden security flaws in CORS frameworks! Discover how this approach is reshaping security protocols and fortifying web defenses. 🔍 🔗 #CyberSecurity #CodeQL github.blog/security/appli…
github.blog
Modeling CORS frameworks with CodeQL to find security vulnerabilities
Discover how to increase the coverage of your CodeQL CORS security by modeling developer headers and frameworks.
⚠️ 100+ software vulnerabilities are reported daily. Who has time to fix them all? Enter CodeQL — GitHub’s AI debugger that scans, patches, and explains code issues automatically. projectosint.com/codeql-ai-debu… #CodeQL #AIDebugging #GitHubTools #SecureDev #AIinTech
Tell me You're a #security folk without telling it mine : @github @snyksec #security #codeQL #AppSec
Implementing a custom #CodeQL extractor + libs for an unsupported language is pure torture but hey I found some bugs already so I guess it’s worth it
Evaluate custom ratings windshock.github.io/en/post/2024-0… using #sast like #joernio, #CodeQL, and #Checkmarx in contexts lacking an established #DevelopmentCulture, particularly beneficial for #LazyDeveloper.
The risks of GitHub Actions: Researcher describes severe potential of CodeQL vulnerability, now fixed: #GitHubActions #CodeQL #SecurityVulnerability #CyberSecurity #DevOps #GitHubSecurity @d3vclass devclass.com/2025/04/02/the…
devclass.com
The risks of GitHub Actions: Researcher describes severe potential of CodeQL vulnerability, now...
A researcher has described how a vulnerability in GitHub’s CodeQL, a tool for detecting security issues, had the […]
Wrote a MCP server for #CodeQL, tried it out with Cursor and it's quite fun so far! I think the next step would be adding support for query-models. Allowing an LLM to easily add sources/sinks to existing queries could be very promising😁 github.com/JordyZomer/cod…
GitHub’s Product Security Engineering team is securing the code behind #GitHub with tools like #CodeQL, detecting and fixing vulnerabilities at scale. Now, they’re sharing their insights to help organizations strengthen their own codebases: bit.ly/4j6GMoe #InfoQ
GitHub is leveling up its security game with CodeQL. 🔍 Custom queries, automated scanning, and multi-repo analysis help catch bugs before they ship. Learn how they're doing it: buff.ly/m9enOb3 #DevSecOps #CodeQL #GitHubSecurity
How #GitHub uses #CodeQL to secure GitHub github.blog/engineering/ho…
How GitHub uses CodeQL to secure GitHub #secure #CodeQL buff.ly/3ExDETv
CVE-2020-9967 - Apple macOS XNU 6LowPan Kernel RCE Write-up alexplaskett.github.io/CVE-2020-9967/ #macOS #codeql
Introduction to static analysis and CodeQL by Sylwia Budzynska (@github) github.blog/2023-03-31-cod… #codeql #infosec #cybersecurity #staticanalysis
Finding #Java gadgets chains has never been so easy with the help of #CodeQL. Checkout our latest article, in which @hugow_vincent demonstrates a new technique to leverage the power of CodeQL to find new gadgets: synacktiv.com/en/publication… QLinspector: github.com/synacktiv/QLin…
Two part series on using CodeQL for vulnerability research Excellent blog posts by Sylwia Budzynska (@github) Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… #codeql #infosec
My #CodeQL journey continues… QL examples to search for likely bugs are useful! github.com/github/codeql/…
Short introduction to CodeQL and SemGrep rules syntax (credits @spaceraccoonsec) spaceraccoon.dev/comparing-rule… #codeql #semgrep #infosec #cybersecurity
My new article about #Java gadgets chains and #CodeQL is out, new technique to find new chains 👹 synacktiv.com/publications/f…
Series on code static analysis using CodeQL Credits Sylwia Budzynska (@GHSecurityLab) "CodeQL zero to hero" Part 1: github.blog/2023-03-31-cod… Part 2: github.blog/2023-06-15-cod… Part 3: github.blog/2024-04-29-cod… #codeql
We're not only giving training at @BlackHatEvents and @_ringzer0 later today, but also have an internal #codeQL workshop by @HectorCuesta !
CodeQL plugin for Neovim github.com/pwntester/code… #Pentesting #CodeQL #Neovim #CyberSecurity #Infosec
New blog post on debugging #CodeQL databases by using a technique called Partial Paths. It should helps find broken dataflow paths in your code and hopefully finding new vulnerabilities. geekmasher.dev/sast/codeql/22…
#CodeQL was also used by @NASAJPL to find critical bugs on Curiosity mission 9 years ago and they were fixed remotely!
Honored that @NASA is using GitHub, Actions, and CodeQL for the Mars drone flight software: github.com/nasa/fprime If anyone working on this needs GitHub support, please feel free to DM me directly!
Rule Writing for CodeQL and Semgrep spaceraccoon.dev/comparing-rule… #Pentesting #CodeQL #CyberSecurity #Infosec
CodeQL zero to hero part 1: the fundamentals of static analysis for vulnerability research github.blog/2023-03-31-cod… #Pentesting #CodeQL #Vulnerability #CyberSecurity #Infosec
Finding Gadgets Like It's 2022 synacktiv.com/publications/f… #Pentesting #CodeQL #CyberSecurity #Infosec
Something went wrong.
Something went wrong.
United States Trends
- 1. Cowboys 69.6K posts
- 2. Nick Smith 16.6K posts
- 3. Kawhi 4,547 posts
- 4. Cardinals 31.3K posts
- 5. #LakeShow 3,521 posts
- 6. #WeTVAlwaysMore2026 803K posts
- 7. #WWERaw 64.3K posts
- 8. Kyler 8,733 posts
- 9. Blazers 8,294 posts
- 10. Jerry 45.6K posts
- 11. Jonathan Bailey 30.9K posts
- 12. No Luka 3,796 posts
- 13. Logan Paul 10.6K posts
- 14. Valka 5,024 posts
- 15. Dalex 2,700 posts
- 16. Jacoby Brissett 5,835 posts
- 17. #AllsFair N/A
- 18. Pacers 13.6K posts
- 19. Bronny 14.6K posts
- 20. Pickens 6,733 posts